# CVEs published 2022-10-24

37 CVEs were published on October 24, 2022: 11 critical, 5 high. Days are UTC.

- [CVE-2022-33757](https://cve.now/CVE-2022-33757.md): An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. (CVSS 6.5, Tenable Nessus)
- [CVE-2022-29851](https://cve.now/CVE-2022-29851.md): documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because… (CVSS 9.8)
- [CVE-2022-31468](https://cve.now/CVE-2022-31468.md): OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter. (CVSS 6.1)
- [CVE-2022-38117](https://cve.now/CVE-2022-38117.md): Juiker app - Hard-coded Credentials (CVSS 5.5, Juiker app)
- [CVE-2021-26727](https://cve.now/CVE-2021-26727.md): spx\_restservice SubNet\_handler\_func Multiple Command Injections and Stack-Based Buffer Overflows (CVSS 10.0, Lanner IAC-AST2500A)
- [CVE-2021-26728](https://cve.now/CVE-2021-26728.md): spx\_restservice KillDupUsr\_func Command Injection and Stack-Based Buffer Overflow (CVSS 10.0, Lanner IAC-AST2500A)
- [CVE-2021-26729](https://cve.now/CVE-2021-26729.md): spx\_restservice Login\_handler\_func Command Injection and Multiple Stack-Based Buffer Overflows (CVSS 10.0, Lanner IAC-AST2500A)
- [CVE-2021-26730](https://cve.now/CVE-2021-26730.md): spx\_restservice Login\_handler\_func Subfunction Stack-Based Buffer Overflow (CVSS 10.0, Lanner IAC-AST2500A)
- [CVE-2021-26731](https://cve.now/CVE-2021-26731.md): spx\_restservice modifyUserb\_func Command Injection and Multiple Stack-Based Buffer Overflows (CVSS 9.1, Lanner IAC-AST2500A)
- [CVE-2021-26732](https://cve.now/CVE-2021-26732.md): spx\_restservice First\_network\_func Broken Access Control (CVSS 6.5, Lanner IAC-AST2500A)
- [CVE-2021-26733](https://cve.now/CVE-2021-26733.md): spx\_restservice FirstReset\_handler\_func Broken Access Control (CVSS 5.3, Lanner IAC-AST2500A)
- [CVE-2021-42010](https://cve.now/CVE-2021-42010.md): CRLF log injection (CVSS 9.8, Apache Software Foundation Apache Heron · org.apache.heron:…)
- [CVE-2021-4228](https://cve.now/CVE-2021-4228.md): Hard-coded TLS Certificate (CVSS 5.8, Lanner IAC-AST2500A)
- [CVE-2021-44467](https://cve.now/CVE-2021-44467.md): spx\_restservice KillDupUsr\_func Broken Access Control (CVSS 5.3, Lanner IAC-AST2500A)
- [CVE-2021-44769](https://cve.now/CVE-2021-44769.md): TLS Certificate Generation Function Improper Input Validation (CVSS 4.9, Lanner IAC-AST2500A)
- [CVE-2021-44776](https://cve.now/CVE-2021-44776.md): spx\_restservice SubNet\_handler\_func Broken Access Control (CVSS 6.5, Lanner IAC-AST2500A)
- [CVE-2021-45925](https://cve.now/CVE-2021-45925.md): Username Enumeration (CVSS 5.3, Lanner IAC-AST2500A)
- [CVE-2021-46279](https://cve.now/CVE-2021-46279.md): Session Fixation and Insufficient Session Expiration (CVSS 5.8, Lanner IAC-AST2500A)
- [CVE-2021-46848](https://cve.now/CVE-2021-46848.md): GNU Libtasn1 before 4.19.0 has an ETYPE\_OK off-by-one array size check that affects asn1\_encode\_simple\_der. (CVSS 9.1)
- [CVE-2021-46850](https://cve.now/CVE-2021-46850.md): myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. (CVSS 7.2)
- [CVE-2022-3344](https://cve.now/CVE-2022-3344.md): A flaw was found in the KVM's AMD nested virtualization (SVM). (CVSS 5.5, Linux kernel)
- [CVE-2022-36368](https://cve.now/CVE-2022-36368.md): Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote… (CVSS 4.8, IPFire Project IPFire)
- [CVE-2022-3676](https://cve.now/CVE-2022-3676.md): In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. (CVSS 6.5, The Eclipse Foundation Eclipse OpenJ9)
- [CVE-2022-38580](https://cve.now/CVE-2022-38580.md): Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF). (CVSS 9.8, github.com/zalando/skipper)
- [CVE-2022-39305](https://cve.now/CVE-2022-39305.md): Gin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous Type (CVSS 9.8, flipped-aurora gin-vue-admin)
- [CVE-2022-39313](https://cve.now/CVE-2022-39313.md): Parse Server crashes when receiving file download request with invalid byte range (CVSS 7.5, parse-community parse-server · parse-server)
- [CVE-2022-39314](https://cve.now/CVE-2022-39314.md): User enumeration in the code-based login and password reset forms (CVSS 4.8, getkirby kirby · getkirby/cms)
- [CVE-2022-39836](https://cve.now/CVE-2022-39836.md): An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. (CVSS 5.5)
- [CVE-2022-39837](https://cve.now/CVE-2022-39837.md): An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. (CVSS 5.5)
- [CVE-2022-40690](https://cve.now/CVE-2022-40690.md): Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary… (CVSS 5.4, BookStack)
- [CVE-2022-40984](https://cve.now/CVE-2022-40984.md): Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker… (CVSS 9.8, Yokogawa Test & Measurement WTViewerE series)
- [CVE-2022-41796](https://cve.now/CVE-2022-41796.md): Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain… (CVSS 7.8, Sony Content Transfer)
- [CVE-2022-41797](https://cve.now/CVE-2022-41797.md): Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for… (CVSS 6.5, ByteDance K.K. Lemon8 App for Android and Lemon8 App for iOS)
- [CVE-2022-41799](https://cve.now/CVE-2022-41799.md): Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote… (CVSS 6.5, WESEEK GROWI v5 series and v4 series)
- [CVE-2022-41986](https://cve.now/CVE-2022-41986.md): Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time… (CVSS 7.5, Internet Initiative Japan IIJ SmartKey)
- [CVE-2022-43677](https://cve.now/CVE-2022-43677.md): In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString. (no CVSS, github.com/free5gc/free5gc · github.com/free5gc/aper)
- [CVE-2022-43680](https://cve.now/CVE-2022-43680.md): In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML\_ExternalEntityParserCreate in ou (CVSS 7.5, platform/external/expat)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2022-10-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.